OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.
0
votes
0answers
10 views
OpenLDAP proxy Active Directory : force -b <base> with rwm rules?
We have changed your directory OpenLdap by Active Directory. Many process used OpenLdap.
I create a openldap proxy to access to Active Directory. It works very well... :)
Unfortunately, many ...
0
votes
0answers
10 views
PublicKeys in Openldap
I have configured the following:-
Openldap on EC2 instance with OpenSSH-LPK patch (I am able to add public keys using phpldapadmin)
Another EC2 instance with libnss-ldap libpam-ldap ldap-utils on, ...
0
votes
0answers
20 views
Need help in configuring LDAP acl
I am trying to configure acl in such a way users with attribute allowedService with application name can only login to that particular application.
We have users as follows:
dn: ...
0
votes
0answers
14 views
Apache 2.2, mod_authz_ldap authentication fails on CentOS 6.3
Lately LDAP authenticaion used in BackupPC installation ceased to work after latest upgrades of Apache and corresponding modules.
Setup: OpenLDAP (2.3.43-12) server used for domain authentication.
...
0
votes
0answers
18 views
Ubuntu 13.04 - OpenLDAP invalid crendetials
I'm trying to follow the Ubuntu official OpenLDAPServer guide with no success.
When I tried to log into the server it says( ...
0
votes
0answers
32 views
How can I get Openindiana built in samba to use an OpenLDAP server?
I built an OpenIndiana / NAPP-IT server to use for samba home shares. Up to now I had planned to use a KVM virtual machine to run the samba/ldap stack, then connect the vm to the ZFS volume thru ...
1
vote
1answer
14 views
Unable to login applications using LDAP alias
We have several applications and we are able to integrate LDAP successfully.
In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
2answers
31 views
CentOS 5.8 - NSCD can't caching the password
I try to configure NSCD to connect ldap users to my PC.
I like, that users could login offline in this PCs (online ldap users works fine).
Actually, i can use the user, but when i try to introduce ...
1
vote
0answers
34 views
Restrict users to certain applications only
We are using many applications like zabbix, phabricator, AC etc. We need to integrate LDAP in all these applications. These application support LDAP but not group based authentication.
Please let us ...
0
votes
0answers
53 views
Using openldap for ssh authentication
I am looking at setting up an openldap server to work as a central ssh gateway. Am I right in thinking that i need to install an openldap server, and then configure the client server to authenticate ...
0
votes
0answers
13 views
slapd Target is quarantined
I have a syncrepl set up in my slapd that was previously working.
I've checked the ssl connection using:
$openssl s_client -connect host.mydomain.com.au:636 -key /etc/ca/host.key -cert ...
1
vote
1answer
34 views
Bind DN entry missing in stash file - while initializing database for realm
I'm trying to run kerberos with ldap back-end on Centos 6.3
After creating Realm with:
kdb5_ldap_util -D "cn=admin,dc=example,dc=com" create -sscope sub -sf ...
0
votes
1answer
19 views
How to configure ubuntu server with LDAP group based authentication
By installing libnss-ldap we are able to integrate an Ubuntu server with ldap (openldap). But we are unable to configure ldap group based authentication.
We need to configure in such a way that user ...
0
votes
2answers
26 views
OpenLDAP: How to hide config directory from tools like JXplorer, etc
I'm trying to set up an OpenLDAP server for test and demonstration purposes - my team need to be add LDAP connectivity to our product, so we want to have an LDAP server we can authenticate against.
...
0
votes
1answer
40 views
ldapadd works, but ldapsearch doesn't (openldap)
I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3.
I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to ...
0
votes
0answers
50 views
Samba4: external authentication [closed]
From what I understand, Samba4 cannot use external LDAP servers.
That's too bad; I have zero experience, but the thought of using OpenLDAP's back-shell and back-perl in order to authenticate against ...
0
votes
1answer
59 views
Difference between openldap 2.3 and 2.4
There is a difference between openldap 2.3 and 2.4 - specifically with ldapmodify...
If no "changetype:" line is present, the default is "add" if the -a flag is set (or if the program was invoked as ...
0
votes
0answers
18 views
OpenLDAP Referrals URIs containing DN
I am having a problem with enabling referrals on my OpenLDAP server, named ldap2.example.com. I'm trying to make it refer queries to ldap1.example.com in case ldap2 does not have the data.
I am ...
0
votes
1answer
47 views
Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?
Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly.
This is the header of /etc/ldap/slapd.d/cn=config.ldif:
...
0
votes
0answers
24 views
New users in 389/Fedora DS are not able to browse the directory
I'm having a really weird issue where any new user I create in 389 DS is not able to browse the directory.
What I mean is that the user binds without any issue, but when you use any directory browser ...
0
votes
1answer
50 views
Why all LDAP user passwords are incorrectly imported? And can't be modified?
First of all I am new to OpenLDAP setup. I have followed instructions coming from:
HowToForge.com linux openldap setup
#root
dn: dc=localhost,dc=com
dc: localhost
objectClass: dcObject
objectClass: ...
0
votes
0answers
25 views
Migrating OpenLDAP to New Host
I've inherited an OpenLDAP server (2.4.21-0) running on Ubuntu 10.04.4 LTS. It has phpldapadmin installed on top of it and everything is working fine. The server is running on AWS. We'd like to ...
0
votes
2answers
57 views
chroot SFTP to another users subdirectory
I've successfully set up SFTP to chroot a user to their home directory.
However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me ...
0
votes
1answer
34 views
Slaptest for slapd.conf fails due to an invalid path
I have just installed Openldap on Xubuntu. The slapd daemon is working and I can easily stop and start it. Nevertheless when I run a test for the configuration file slapd.conf as follows:
slapdtest ...
0
votes
1answer
12 views
Openldap. How to add and then re-read new attribute
I have custom schema in my ldap customContact.schema with 5 attributes
Now I need to add one more attribute:
# localID
attributetype ( 2.16.840.1.113730.3.1.36
NAME 'localID'
DESC 'Local ...
0
votes
0answers
47 views
Open ldap 2.4.23 Error Message: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
I have installed and partially configured openldap 2.4.23 on RHEl6.3 64 bit.When using the command ldapmodify, I'm getting the following error:
% command: ldapmodify -x -h mydomain.com -p 389 -D ...
0
votes
0answers
37 views
olcAccess rule for work sudo-ldap
We using zentyal SBS. And we want to use sudo-ldap on the Ubuntu 12.04 Clients to override sudo via ldap ou=SUDOers.
I need a true minimal by security rigths rule in olcAccess for work sudo-ldap.
...
0
votes
1answer
35 views
openldap authentication against a slave
I have an openldap master/slave configuration, setup as per the Ubuntu guide, on Ubuntu 12.04, running slapd 2.4.28-1.1ubuntu4.2. I have pam_ldap configured for ssh authentication, everything works ...
0
votes
0answers
36 views
Centralized authentication for a mixed system (Linux, Windows) with existing OpendLdap,Active Directory and Keberos
I have a mixed system.
The linux users are authenticated using existing Active kerberos installed on a linux server and querying data in openldap.
On the other hand,Windows users are authenticated ...
0
votes
0answers
23 views
OpenLDAP - bind request with alias dereferencing
The following alias has been created in OpenLDAP:
dn: uid=nic,ou=moodleusers,dc=bayport
objectClass: top
objectClass: extensibleObject
objectClass: alias
aliasedObjectName: ...
0
votes
0answers
24 views
Cannot ldapdelete
When I run ldapdelete I get ldap_delete: Insufficient access (50):
[root@199 ~]# ldapdelete -Y EXTERNAL -H ldapi:/// 'dc=ashley-vps,dc=mildred,dc=fr'
SASL/EXTERNAL authentication started
SASL ...
0
votes
1answer
76 views
ldap_modify: Other (e.g., implementation specific) error (80), <olcAccess> handler exited with 1
When modifying the Open-LDAP configuration using:
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: {0}to *
by ...
1
vote
1answer
117 views
Why can't I create my first object in my Open-LDAP server?
I'm trying to set up my first LDAP server that will be used to store user accounts (for things such as mail, git server and a few other things). I managed to install the server, but I'm stuck when I ...
1
vote
1answer
199 views
Open LDAP and ActiveDirectory synchronization
I have been searching on google for a while to find out the best way to synchronize the user database between OpenLDAP and an ActiveDirectory, but with not a clear results !
What i want to achieve ...
0
votes
1answer
46 views
Switching OpenLDAP from cn=config to slapd.conf
In a fresh OpenLDAP Install on debian 6 (or ubuntu 12.04) I would like to switch from modern cn=config style of configuration to traditional slapd.conf configuration. I have heard that it is possible, ...
0
votes
0answers
14 views
OpenLDAP Replicating 2 different subtrees from the same Server
Is it possible to have a single OpenLDAP server replicate 2 different subtrees from another OpenLDAP server?
If so, how can this be done?
0
votes
0answers
21 views
What does rc -2 mean in OpenLDAP syncrepl?
I am having an issue with syncRepl.
I keep getting an rc -2 during syncrepl for replication. What does this mean?
0
votes
0answers
27 views
Combining CA's into a single PEM
I have been wondering if it is possible to combine two CA certificates into a single .pem, then use that pem to allow clients with certs signed by either CA to create TLS connections with an LDAP ...
1
vote
0answers
51 views
CVS authentication with openldap
I have migrated the CVS from Windows to Linux and imported the repo's as needed. Now I have to setup ldap authentication ( Remote Server/Linux/Open LDAP ) for CVS. As per other blogs, it says we have ...
1
vote
1answer
116 views
Restricting LDAP users from authenticating without a valid shell
What I'm trying to accomplish is if I changed the user's attributes in LDAP to have no shell; for example: /etc/noshell, I do not want the user to ssh successfully. I have changed the attribute of one ...
0
votes
1answer
104 views
opensuse 12.2: yast misconfiguration ldap server
i have a very simple question. I used Yast to configure openldap. It worked. Then I had to change the certificates for SSL/TSL support. I did this trough Yast. However, I gave the path towards the ...
0
votes
0answers
33 views
Setting Authentication & Access for ldap backend
I have three servers running openldap 2.4.
On superior server I have all account information. ldap://a.example.com
On subordinate server I have an address book. ldap://b.example.com
On third ...
0
votes
1answer
79 views
Strange issue with LDAP server
I've LDAP production server running over last 1 years without any issues, I'm suddently getting password fail error while authenticating via pam_ldap.so its show following error message, I'm able to ...
0
votes
0answers
23 views
LDAP ACL to allow add but not delete of an entry?
I'm trying to figure out if it is possible to create one or more ACLs in OpenLDAP that would allow a user to add a new entry (e.g. a new employee) but not to delete that entry.
At the moment, I have:
...
0
votes
0answers
40 views
How can OpenLDAP meta backend be searched for members of groups of their components?
I have a working OpenLDAP (2.4.33) configured with meta backend.
I successfully authenticate users with it, but I need a new dynamic group collecting members from group1 in domain1 and group2 in ...
0
votes
1answer
43 views
Group policy and OpenLDAP
Is there any sort of group policy mechanic for OpenLDAP? And just like the GUI tool OpenLDAP is there a version of the GPMC for OpenLDAP's group policy?
0
votes
0answers
119 views
Problems with OpenSSL, GnuTLS, and OpenLDAP libs on Ubuntu 12.04
Some background.
I am trying to get a PHP web app to connect to an SSL-enabled LDAP server on Ubuntu 12.04.
For LDAP, PHP uses the OpenLDAP libs.
For SSL, the OpenLDAP libs use GnuTLS (on ...
1
vote
0answers
129 views
LDAP secondary group working for only some users
On an Ubuntu box, I'm having issues with LDAP secondary groups for one user, sabnzbd. The user should be a part of the media group.
daniel@server:~$ id sabnzbd
uid=4996(sabnzbd) gid=4996(sabnzbd) ...
0
votes
0answers
118 views
LDAP password information update failed: Referral Not able to change password from replica
I have configured Master/Slave using slapd.conf and slurpd.
The Problem is I am not able to change client password from slave server if Master Server is stopped.
Master Server -
[root@lr5dir01 ...
0
votes
1answer
175 views
openldap and digest-md5: no secret in database
I'm trying to configure openldap 2.4.33 (built from source on OS X 10.8) to support digest-md5 authentication, and not succeeding. I'm unable to authenticate, getting an error no secret in database, ...
